QuarkContainers: High Performance Secure Container for Serverless
高性能安全容器QuarkContainers解决无服务器计算挑战:强隔离、低开销、快速启动、高性能。通过应用内核、IO优化、休眠加速和Kuasar集成实现突破性改进。
KVM Address Space Isolation
Explore KVM Address Space Isolation: its intuition, applications, lifecycle, usage, and synchronization. Learn about page table filling, switching, and the ASI model for data privilege.
Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities
Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.
UEFI Secure Boot in Cloud Workloads - Implementation and Benefits
Explore UEFI Secure Boot implementation in OpenStack environments, covering benefits for virtual workloads, image compatibility, and configuration methods for bare metal deployments using Ironic.
Live Migration Architecture for Intel TDX-based Confidential VMs
Explore Intel TDX's live migration architecture for confidential VMs, focusing on security properties, components, interfaces, and lifecycle, with insights on implementation and scalability.
Hypervisor-Based Integrity: Protecting Guest Kernels in Cloud Environments
Explore hypervisor-based integrity protection for guest kernels in cloud environments, focusing on threat models, runtime protection, and implementation challenges.
Comparing Performance of NVMe Hard Drives in KVM, Baremetal, and Docker - Virtual Testbed Applications
Explore NVMe drive performance across KVM, Baremetal, and Docker environments using Fio and SPDK. Learn testing methods, tools, and protocols for optimizing virtual testbed applications.
Comparing Performance of NVMe Hard Drives in KVM, Baremetal, and Docker - Using Fio and SPDK
Explore NVMe drive performance across KVM, Baremetal, and Docker environments using Fio and SPDK. Learn testing methods and analysis for optimizing virtual testbed applications.
KVM Memory Cost Optimization in Alibaba Cloud
Explore KVM memory cost optimization techniques for Alibaba Cloud, enhancing efficiency and reducing expenses in virtualized environments.
The Five Big Problems with Confidential Containers
Explore five major challenges in confidential containers technology: attestation, performance, image download, access control, and debuggability. Learn about current solutions and future prospects.
Providing Confidential Guest Services with a Secure VM Service Module on AMD
Explore AMD's SEV-SNP architecture, VMPL, and SVSM for enhanced guest security in virtualization. Learn about Linux kernel support and open-source SVSM development for secure boot and live migration.
Power Management for Telco Operators - Français
Découvrez les stratégies d'optimisation énergétique pour les plateformes NFV, des modifications UEFI aux ajustements VM, en maintenant une performance réseau optimale sans perte de paquets.
Virtual Machine Manager - FreeIPA- Part 1 - Open Source GUI to Manage Virtual Servers and Desktops
Learn to install and use Virtual Machine Manager for managing virtual servers and desktops. Set up Fedora and Ubuntu VMs, explore the interface, and discover remote access capabilities.
Optimizing KVM Performance for Electronic Health Record Systems
Optimizing KVM for Electronic Health Record systems: Reducing speculation overheads, accelerating IPI delivery, and enhancing ecosystem components for improved performance and reliability.
How Fast Can We Go? Booting a Linux VM to Userspace in 100ms and Beyond
Explore techniques to optimize Linux VM boot times, aiming for sub-100ms userspace access. Learn about performance analysis, mitigation strategies, and trade-offs in virtualization technology.
Hypervisor-Enforced Kernel Integrity for Linux with KVM
Explore hypervisor-enforced kernel integrity for Linux using KVM. Learn about advanced protection mechanisms against kernel vulnerabilities and their implementation through virtualization.
SEAPATH - Configuring and Testing an Industrial-Grade Linux Platform for Critical Real-Time Applications in Energy
Explore SEAPATH: an industrial-grade Linux platform for critical real-time applications in energy. Learn about virtualization, high availability, and cybersecurity in IT/OT convergence.
Evaluation of PREEMPT_RT in Virtualized Environments
Exploring real-time capabilities of PREEMPT_RT in virtualized environments for industrial applications, comparing performance across container technologies, KVM, and Jailhouse hypervisor through long-term measurements.
Evaluating Implementation Options for KVM-based Type 1 and 1.5 Hypervisors
Explore implementation options for KVM-based hypervisors, focusing on security, performance optimization, and nested virtualization. Learn about Type 1.5 hypervisor conversion and its impacts.
Speed Up Creation of VM with Pass-Through GPU
Learn techniques to accelerate VM creation with GPU pass-through, covering memory management, VFIO optimization, PCI reset, and KVM metadata improvements for enhanced performance.
Challenges in Supporting Virtual CPU Hotplug on SoC-Based Systems - ARM64 Case Study
Explore challenges and solutions for virtual CPU hotplug on SoC systems, focusing on ARM64 architecture. Learn about limitations, workarounds, and recent developments in this critical area of system management.